$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa File: cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json) Hash identifier: c21rkblnPsaD3e8VqhylY8eKiTS7VNArSrwfm0HiEro= Subject key identifier: D2:BC:DC:87:F0:16:CA:AD:9C:0E:83:59:0F:83:15:1B:49:A2:D4:01 Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584E210EEBE787D9430FF1F23080 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 87 IP address blocks: 149.165.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:eb:e7:87:d9:43:0f:f1:f2:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=c2c3e8f4-b6e8-4f68-a46a-5faeff5bc621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:14:47:fd:e9:16:cf:1a:67:13:81:21:05: 16:1e:90:8a:53:13:46:90:36:6a:44:23:f5:f7:35: cc:d4:d1:ad:cf:b3:1c:a1:7a:2d:65:c2:c2:fa:f6: 11:3f:a3:3c:ea:b8:5e:b2:a0:ca:02:17:3c:ee:6b: 62:29:5c:09:55:fc:07:84:c3:d0:a9:54:15:cd:1a: 84:9b:5a:05:1e:16:ed:2c:ed:c7:cf:25:b0:9c:19: 51:2f:f1:5e:da:95:57:a0:bd:5f:ea:fd:b8:8a:f8: a0:d7:6d:5a:e2:63:17:fd:bf:de:07:ef:c3:b4:26: d6:f6:5b:9e:0d:03:0e:e1:5c:05:a9:56:ee:e1:74: 3f:fe:7e:59:dc:cb:c7:e3:70:c9:00:48:68:f8:f4: 6d:0c:73:a1:1f:31:00:f8:17:b4:f5:5d:1d:44:d0: eb:08:ed:b4:02:4b:d9:10:a0:3e:4e:81:d4:05:96: d4:de:2a:c0:9f:79:ca:c4:7b:20:be:88:56:51:de: f0:1b:ef:ef:9a:bf:ef:b1:29:2e:12:2b:f3:19:57: a8:77:19:e4:f9:bc:18:83:4b:35:76:eb:60:ec:96: e5:c5:53:2e:81:ea:7e:ca:c5:62:15:e4:91:fa:32: dd:fe:3c:8d:94:03:59:04:8b:7d:57:83:4a:1c:64: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BC:DC:87:F0:16:CA:AD:9C:0E:83:59:0F:83:15:1B:49:A2:D4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.165.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ee:32:3a:c6:6a:e9:c6:16:c3:69:a3:14:36:f5:8b:9c:a9: 69:55:dc:83:a5:ef:ca:59:95:6e:59:90:58:22:63:48:bf:58: c4:49:fb:6a:9c:87:6b:29:fc:53:1e:c5:2d:0c:26:c7:ae:3e: e9:74:5c:c5:aa:1c:b1:b4:a5:a7:95:78:66:97:d7:76:e0:17: df:2a:06:95:98:05:8e:6e:b5:d5:60:f8:5f:7a:f3:34:11:16: 3a:55:fa:f7:f3:1c:0b:11:2b:03:38:6b:92:3e:c4:de:35:9c: c1:d3:fc:74:09:20:76:92:ce:3a:23:01:a9:da:2b:2b:64:73: 04:b3:73:7c:1d:f2:ff:c7:9f:c8:e9:25:43:8c:0a:2c:51:8e: c0:58:18:af:8a:a2:f9:f9:8d:c7:82:18:38:66:c5:9a:b9:7d: 1f:58:77:8e:67:0b:7b:2c:d6:00:5c:50:7e:13:94:17:25:63: 19:77:5f:f4:a3:b5:6b:6e:19:3a:7d:d0:fd:07:0c:56:0b:40: 5a:71:83:a8:23:68:4a:d3:15:4f:1d:fe:09:82:75:c4:bd:ce: eb:63:e2:51:8c:0b:34:45:29:1c:1c:85:3c:b1:7f:43:73:7b: d2:75:b2:b8:ba:13:16:f3:86:f7:00:91:ee:22:7d:d7:ad:5c: 42:ae:02:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDuvnh9lDD/HyMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk YzJjM2U4ZjQtYjZlOC00ZjY4LWE0NmEtNWZhZWZmNWJjNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncAUR/3pFs8aZxOBIQUWHpCKUxNGkDZqRCP1 9zXM1NGtz7McoXotZcLC+vYRP6M86rhesqDKAhc87mtiKVwJVfwHhMPQqVQVzRqE m1oFHhbtLO3HzyWwnBlRL/Fe2pVXoL1f6v24ivig121a4mMX/b/eB+/DtCbW9lue DQMO4VwFqVbu4XQ//n5Z3MvH43DJAEho+PRtDHOhHzEA+Be09V0dRNDrCO20AkvZ EKA+ToHUBZbU3irAn3nKxHsgvohWUd7wG+/vmr/vsSkuEivzGVeodxnk+bwYg0s1 dutg7JblxVMugep+ysViFeSR+jLd/jyNlANZBIt9V4NKHGSTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK83IfwFsqtnA6DWQ+DFRtJotQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvY2Q4MWUyZjEtYjFlZS0z MzM5LThmZTUtZWNkYzUxZDEwODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlaUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7uMjrGaunGFsNpoxQ29YucqWlV3IOl78pZlW5ZkFgiY0i/WMRJ+2qc h2sp/FMexS0MJseuPul0XMWqHLG0paeVeGaX13bgF98qBpWYBY5utdVg+F968zQR FjpV+vfzHAsRKwM4a5I+xN41nMHT/HQJIHaSzjojAanaKytkcwSzc3wd8v/Hn8jp JUOMCixRjsBYGK+Kovn5jceCGDhmxZq5fR9Yd45nC3ss1gBcUH4TlBclYxl3X/Sj tWtuGTp90P0HDFYLQFpxg6gjaErTFU8d/gmCdcS9zutj4lGMCzRFKRwchTyxf0Nz e9J1sri6ExbzhvcAke4ifdetXEKuAsI= -----END CERTIFICATE-----Generated at Sat Jun 13 19:26:14 2026 by rpki-client